search

linux-audit / audit-kernel

GitHub mirror of the Linux Kernel's audit repository
https://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit.git
Other
140 stars 37 forks source link

RFE: perform the audit multicast send from the kauditd thread #23

Closed pcmoore closed 7 years ago

pcmoore commented 8 years ago

We currently queue the audit unicast sends to a separate thread while we send the multicast messages immediately. There doesn't appear to be a reason why we can't also do the multicast send from the separate thread as long as we are careful to only queue the skb once and move the netlink tweaks to the dedicated kauditd_thread.

pcmoore commented 8 years ago

Upstream discussion that spawned this RFE:

Related to issue https://github.com/linux-audit/audit-kernel/issues/22.

pcmoore commented 8 years ago

In addition, once we have rewritten the audit multicast code, we should reintroduce the changes that were causing the problem identified in https://github.com/linux-audit/audit-kernel/issues/22, if that commit was reverted.

pcmoore commented 8 years ago

Initial RFC patchset posted:

pcmoore commented 7 years ago

The RFC patchset is now in audit#next:

... and the revert from issue #22 has been reverted in audit#next as well:

pcmoore commented 7 years ago

Resolved in Linux v4.10.